--- strongswan-5.1.2-orig/debian/rules	2014-03-01 02:53:13.000000000 -0600
+++ strongswan-5.1.2/debian/rules	2015-03-05 23:15:54.987065342 -0600
@@ -141,6 +141,7 @@
 	# first special cases
 ifeq ($(DEB_BUILD_ARCH_OS),linux)
 	# handle Linux-only plugins
+	dh_install -p strongswan-plugin-kernel-libipsec usr/lib/ipsec/plugins/libstrongswan-kernel-libipsec.so
 	dh_install -p libstrongswan usr/lib/ipsec/plugins/libstrongswan-kernel-netlink.so
 endif
 
--- strongswan-5.1.2-orig/debian/usr.lib.ipsec.charon	2014-03-01 02:53:13.000000000 -0600
+++ strongswan-5.1.2/debian/usr.lib.ipsec.charon	2015-03-06 01:46:34.592108088 -0600
@@ -24,6 +24,8 @@
   network,
   network raw,
 
+  /dev/net/tun              rw,
+
   /bin/dash                 rmPUx,
 
   /etc/ipsec.conf           r,